Re: US executive order forces all US goverment resoruces to be with ARIN/etc?

2025-01-16 Thread William Herrin
On Thu, Jan 16, 2025 at 4:04 PM Mark Foster  wrote:
> Presumably the RIR relationship is seen to deliver advantages from a
> risk management perspective.

The contract with ARIN gets you access to their authenticated route
registry (IRR) and lets you create RPKI records. Legacy registrants
don't have access to it.

Regards,
Bill Herrin


-- 
William Herrin
[email protected]
https://bill.herrin.us/


Re: US executive order forces all US goverment resoruces to be with ARIN/etc?

2025-01-16 Thread Mark Foster



On 17/01/25 12:54, William Herrin wrote:

On Thu, Jan 16, 2025 at 3:28 PM Mark Foster  wrote:

Put it another way - what _assigned_ resources (the use of the word
'assigned' needs to be considered) would any FCEB be using that aren't
from either ARIN or another appropriate registry?

Hi Mark,

The answer is: so-called "legacy" IP addresses which were assigned by
one of the incarnations of the "InterNIC" prior to ARIN's inception in
1997 and for which the registrants have subsequently declined to sign
a contract with ARIN.



Thanks Bill, I should've thought of this!

So I suppose that 'subsequent decline' position will need to be 
reconsidered by agencies thus within that scope.


Presumably the RIR relationship is seen to deliver advantages from a 
risk management perspective.


Mark.



Re: US executive order forces all US goverment resoruces to be with ARIN/etc?

2025-01-16 Thread William Herrin
On Thu, Jan 16, 2025 at 3:28 PM Mark Foster  wrote:
> Put it another way - what _assigned_ resources (the use of the word
> 'assigned' needs to be considered) would any FCEB be using that aren't
> from either ARIN or another appropriate registry?

Hi Mark,

The answer is: so-called "legacy" IP addresses which were assigned by
one of the incarnations of the "InterNIC" prior to ARIN's inception in
1997 and for which the registrants have subsequently declined to sign
a contract with ARIN.

Regards,
Bill Herrin


-- 
William Herrin
[email protected]
https://bill.herrin.us/


Re: US executive order forces all US goverment resoruces to be with ARIN/etc?

2025-01-16 Thread Mark Foster



On 17/01/25 12:19, babydr DBA James W. Laferriere wrote:

Hello ,  All ...

On Thu, 16 Jan 2025, William Herrin wrote:

On Thu, Jan 16, 2025 at 9:00?AM Ben Cartwright-Cox via NANOG
 wrote:
https://www.whitehouse.gov/briefing-room/presidential-actions/2025/01/16/executive-order-on-strengthening-and-promoting-innovation-in-the-nations-cybersecurity/ 



(i)    Within 90 days of the date of this order, FCEB agencies 
shall take steps to ensure that all of their assigned Internet 
number resources (Internet Protocol (IP) address blocks and 
Autonomous System Numbers) are covered by a Registration Services 
Agreement with the American Registry for Internet Numbers or 
another appropriate regional Internet registry.


I don't have numbers on hand for how much US Gov space is already with
ARIN, but this seems like a pretty nice win for ARIN getting an order
for the US Gov legacy space attached to them (mentioned by name),
while other RIRs are available in that order, I don't imagine it's
going to other RIRs :)


For clarity, FCEB stands for Federal CIVILIAN Executive Branch. So,
this order excludes the military, probably the intelligence agencies,
state and local governments, etc. And not everything operated for the
Federal government is done on their IP addresses. This won't affect
address space assigned to federal contractors.

In a nutshell, this means that the few non-military federal agencies
still operating on "legacy" IPv4 addresses will now have to officially
sign a contract with ARIN. And nothing more than that.

Regards,
Bill Herrin

While it maybe associated with only FCEB agencies .
Seems like one more step toward a State sanctoined Monopoly .
Which even in anyones eyes ARIN is ,  Within the U.S.A. Region .

Tooldes ,  JimL



Please indulge me - as a non-American perhaps this is obvious.
The directive states 'or another appropriate regional Internet 
registry'.  Of course there's a default assumption (or perhaps, just 
obvious example) of ARIN for a North American nature. But given any 
other "appropriate regional Internet registry" is also valid, I don't 
see that this is the aspect that should have any focus.


Put it another way - what _assigned_ resources (the use of the word 
'assigned' needs to be considered) would any FCEB be using that aren't 
from either ARIN or another appropriate registry?  And where they're 
not, perhaps they should be as this would be an important measure for 
risk management (liability protection?)


I feel like people are reading too much into it; it's not about 
monopolistic behaviour (except to the degree that the RIR's _are_ 
monopolies within the economies they serve). It's just about ensuring 
good/correct practices are in place, which feels reasonable.


Mark.



Re: US executive order forces all US goverment resoruces to be with ARIN/etc?

2025-01-16 Thread babydr DBA James W. Laferriere

Hello ,  All ...

On Thu, 16 Jan 2025, William Herrin wrote:

On Thu, Jan 16, 2025 at 9:00?AM Ben Cartwright-Cox via NANOG
 wrote:

https://www.whitehouse.gov/briefing-room/presidential-actions/2025/01/16/executive-order-on-strengthening-and-promoting-innovation-in-the-nations-cybersecurity/


(i)Within 90 days of the date of this order, FCEB agencies shall take steps 
to ensure that all of their assigned Internet number resources (Internet 
Protocol (IP) address blocks and Autonomous System Numbers) are covered by a 
Registration Services Agreement with the American Registry for Internet Numbers 
or another appropriate regional Internet registry.


I don't have numbers on hand for how much US Gov space is already with
ARIN, but this seems like a pretty nice win for ARIN getting an order
for the US Gov legacy space attached to them (mentioned by name),
while other RIRs are available in that order, I don't imagine it's
going to other RIRs :)


For clarity, FCEB stands for Federal CIVILIAN Executive Branch. So,
this order excludes the military, probably the intelligence agencies,
state and local governments, etc. And not everything operated for the
Federal government is done on their IP addresses. This won't affect
address space assigned to federal contractors.

In a nutshell, this means that the few non-military federal agencies
still operating on "legacy" IPv4 addresses will now have to officially
sign a contract with ARIN. And nothing more than that.

Regards,
Bill Herrin

While it maybe associated with only FCEB agencies .
Seems like one more step toward a State sanctoined Monopoly .
Which even in anyones eyes ARIN is ,  Within the U.S.A. Region .

Tooldes ,  JimL

--
+-+
| James   W.   Laferriere| SystemTechniques | Give me VMS |
| Network & System Engineer  | 3237 Holden Road |  Give me Linux  |
| [email protected] | Fairbanks, AK. 99709 |   only  on  AXP |
+-+


Re: US executive order forces all US goverment resoruces to be with ARIN/etc?

2025-01-16 Thread William Herrin
On Thu, Jan 16, 2025 at 9:00 AM Ben Cartwright-Cox via NANOG
 wrote:
> https://www.whitehouse.gov/briefing-room/presidential-actions/2025/01/16/executive-order-on-strengthening-and-promoting-innovation-in-the-nations-cybersecurity/
>
> > (i)Within 90 days of the date of this order, FCEB agencies shall take 
> > steps to ensure that all of their assigned Internet number resources 
> > (Internet Protocol (IP) address blocks and Autonomous System Numbers) are 
> > covered by a Registration Services Agreement with the American Registry for 
> > Internet Numbers or another appropriate regional Internet registry.
>
> I don't have numbers on hand for how much US Gov space is already with
> ARIN, but this seems like a pretty nice win for ARIN getting an order
> for the US Gov legacy space attached to them (mentioned by name),
> while other RIRs are available in that order, I don't imagine it's
> going to other RIRs :)

For clarity, FCEB stands for Federal CIVILIAN Executive Branch. So,
this order excludes the military, probably the intelligence agencies,
state and local governments, etc. And not everything operated for the
Federal government is done on their IP addresses. This won't affect
address space assigned to federal contractors.

In a nutshell, this means that the few non-military federal agencies
still operating on "legacy" IPv4 addresses will now have to officially
sign a contract with ARIN. And nothing more than that.

Regards,
Bill Herrin



-- 
William Herrin
[email protected]
https://bill.herrin.us/


Re: US executive order forces all US goverment resoruces to be with ARIN/etc?

2025-01-16 Thread Nick Hilliard

Ben Cartwright-Cox via NANOG wrote on 16/01/2025 21:29:
I mean sure, but if ARIN is being named directly I assume that all or 
almost all of it is going to go to ARIN!


not all the US federal government's interests reside in the USA.

Nick



Re: US executive order forces all US goverment resoruces to be with ARIN/etc?

2025-01-16 Thread Ben Cartwright-Cox via NANOG
I mean sure, but if ARIN is being named directly I assume that all or
almost all of it is going to go to ARIN!

On Thu, Jan 16, 2025, 20:26 Tom Beecher  wrote:

>  or another appropriate regional Internet registry.
>
>
> Important end of the sentence.
>
> On Thu, Jan 16, 2025 at 12:09 PM Ben Cartwright-Cox via NANOG <
> [email protected]> wrote:
>
>> Still reading this very word dense executive order that came out recently:
>>
>>
>> https://www.whitehouse.gov/briefing-room/presidential-actions/2025/01/16/executive-order-on-strengthening-and-promoting-innovation-in-the-nations-cybersecurity/
>>
>> I did notice however that it has:
>>
>> > (i)Within 90 days of the date of this order, FCEB agencies shall
>> take steps to ensure that all of their assigned Internet number resources
>> (Internet Protocol (IP) address blocks and Autonomous System Numbers) are
>> covered by a Registration Services Agreement with the American Registry for
>> Internet Numbers or another appropriate regional Internet registry.
>>
>> I don't have numbers on hand for how much US Gov space is already with
>> ARIN, but this seems like a pretty nice win for ARIN getting an order
>> for the US Gov legacy space attached to them (mentioned by name),
>> while other RIRs are available in that order, I don't imagine it's
>> going to other RIRs :)
>>
>


Re: US executive order forces all US goverment resoruces to be with ARIN/etc?

2025-01-16 Thread Tom Beecher
>
>  or another appropriate regional Internet registry.


Important end of the sentence.

On Thu, Jan 16, 2025 at 12:09 PM Ben Cartwright-Cox via NANOG <
[email protected]> wrote:

> Still reading this very word dense executive order that came out recently:
>
>
> https://www.whitehouse.gov/briefing-room/presidential-actions/2025/01/16/executive-order-on-strengthening-and-promoting-innovation-in-the-nations-cybersecurity/
>
> I did notice however that it has:
>
> > (i)Within 90 days of the date of this order, FCEB agencies shall
> take steps to ensure that all of their assigned Internet number resources
> (Internet Protocol (IP) address blocks and Autonomous System Numbers) are
> covered by a Registration Services Agreement with the American Registry for
> Internet Numbers or another appropriate regional Internet registry.
>
> I don't have numbers on hand for how much US Gov space is already with
> ARIN, but this seems like a pretty nice win for ARIN getting an order
> for the US Gov legacy space attached to them (mentioned by name),
> while other RIRs are available in that order, I don't imagine it's
> going to other RIRs :)
>